Senior DevSecOps Engineer

NuAxis Innovations; United States; On-site; USD 130,000 - 185,000; Full time

Job summary

NuAxis Innovations seeks a Senior DevSecOps Engineer to integrate security into CI/CD pipelines and cloud environments, owning pipeline architecture and IaC standards. You will implement SAST/DAST/SCA, container security, and secret management while automating infrastructure provisioning.

In this role you will lead secure delivery practices, support ATO and monitoring efforts, and mentor teams to shift security left across development workflows.

Qualifications

• Bachelor's degree required in IT/CS/Cybersecurity.
• 5–8 years of DevSecOps/DevOps experience.
• Certifications: AWS Security Specialty / Azure Security / CKA / CompTIA Security+.
• Preferred: CISSP, CDP, AWS/Azure DevOps Expert.

Responsibilities

• Design, build, and maintain secure CI/CD pipelines.
• Embed security gates (SAST/DAST/SCA) across toolchain.
• Manage secrets, credentials, certificates and privileged access.
• Maintain infrastructure-as-code provisioning for repeatable environments.
• Instrument monitoring, logging, and alerting for security visibility.
• Support ATO, continuous monitoring, and security evidence generation.
• Coach development teams on secure delivery practices.

Skills

CI/CD security

SAST

DAST

container security

secrets management

IaC scanning

pipeline automation

cloud security configuration

Kubernetes experience

security coaching

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

Jenkins

GitHub Actions

GitLab CI

Azure DevOps

Terraform

Ansible

Docker

Kubernetes

Helm

SonarQube

Fortify

Checkmarx

OWASP ZAP

Burp Suite

Snyk

Trivy

Anchore

HashiCorp Vault

Job description

We are a federal IT company on a mission to make customer experience (CX) the center of every government solution. Technology is our Passion. People are our Purpose. We know tech, but we love people. NuAxis is home to thinkers and feelers; engineers and artists. We work hard and support each other along the way. Teamwork is more than just a buzzword for us, it's a state of mind.

We believe happy employees do amazing work, so join our team NOW! We are currently seeking a Senior DevSecOps Engineer for a Full-Time position.

Job Summary

Integrates security into CI/CD pipelines, cloud environments, and development workflows so teams can deliver software quickly and safely. Owns pipeline architecture, automated security gating, and infrastructure-as-code standards.

Key Responsibilities

• Design, build, and maintain CI/CD pipelines with embedded security gates.
• Implement SAST, DAST, SCA, container image scanning, and infrastructure-as-code scanning across the toolchain.
• Manage secrets, credentials, certificates, and privileged access within automated workflows.
• Author and maintain infrastructure-as-code for repeatable, auditable environment provisioning.
• Instrument monitoring, logging, and alerting to support operational and security visibility.
• Support ATO, continuous monitoring, and security control evidence generation.
• Coach development teams on secure delivery practices and shift-left adoption.

Minimum Qualifications

• Minimum Education: Bachelor's degree in Information Technology, Computer Science, or Cybersecurity.
• Minimum Experience: Five (5) to eight (8) years of DevSecOps or DevOps engineering experience.
• Certifications - Required: One current certification among: AWS Certified Security - Specialty, Microsoft Certified Azure Security Engineer Associate, Certified Kubernetes Administrator (CKA), or CompTIA Security+.
• Certifications - Obtainable After Hire: Certified Kubernetes Security Specialist (CKS) or HashiCorp Certified: Terraform Associate, within 180 days of assignment.
• Certifications - Preferred: CISSP; Certified DevSecOps Professional (CDP); AWS or Azure DevOps Engineer Expert.
• Required Skills: CI/CD security; SAST and DAST; container security; secrets management; infrastructure-as-code scanning; pipeline automation; cloud security configuration.
• Preferred Skills: Kubernetes and container orchestration; cloud-native monitoring; federal ATO and continuous monitoring support.

Technical Environment

Jenkins, GitHub Actions, GitLab CI, and Azure DevOps Pipelines; Terraform and Ansible; Docker, Kubernetes, and Helm; SonarQube, Fortify, and Checkmarx for SAST; OWASP ZAP and Burp Suite for DAST; Snyk, Trivy, and Anchone for software composition and image scanning; HashiCorp Vault and AWS Secrets Manager; Splunk and the ELK Stack; Prometheus and Grafana; AWS and Azure; NIST SP 800-53 control mapping and continuous monitoring evidence.

Does this opportunity sound like a fit for you?

Our Profile

We are an IT company with a unique mission - make people the center of every federal IT solution. Our technologists have always gone the extra mile to help our federal clients succeed. And over the years, we saw a growing disconnect in how federal IT initiatives were built and managed. Time after time, programs failed because the focus was on the tools and products and not the people using them.

NuAxis is an Equal Opportunity Employer. Employment is contingent upon successful completion of a background investigation. our Benefits and Culture